← CVE Intelligence

CVE-2023-45196

Adminer and AdminerEvo denial of service via HTTP redirect PUBLISHED

Description (CNA)

Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4.

Affected (CNA)

Vendor / productVersions
Adminer / Admineraffected 0 through *; affected cpe:2.3:a:adminer:adminer:0:*:*:*:*:*:*:* through cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*
AdminerEvo / AdminerEvoaffected 4.8.2 before 4.8.4; affected cpe:2.3:a:adminerevo:adminerevo:0:*:*:*:*:*:*:* before cpe:2.3:a:adminerevo:adminerevo:4.8.4:*:*:*:*:*:*:*

CWE

CWE-400

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.